evm-swiss-knife

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to fetch external JSON data from ChainList (https://chainlist.org/rpcs.json), which is community-maintained and could contain untrusted free text or manipulated fields read into the agent context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly includes tools and commands for interacting with EVM-compatible blockchains using Foundry's cast tool, specifically covering crypto/blockchain operations like sending transactions, executing state-changing contract functions, and transferring funds (cast send --private-key <pk> --rpc-url <rpc_url> <to_address> --value <amount_in_wei>). This meets the criteria for Direct Financial Execution (Crypto/Blockchain Wallets, Swaps, Signing).